Re: Transparent encryption in PostgreSQL?

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Bob <luckyratfoot(at)gmail(dot)com>
Cc: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>, Matt McNeil <mcneil(at)callahanpro(dot)com>, pgsql-general(at)postgresql(dot)org
Subject: Re: Transparent encryption in PostgreSQL?
Date: 2005-07-13 21:43:23
Message-ID: 21884.1121291003@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Bob <luckyratfoot(at)gmail(dot)com> writes:
> Doesn't that really only save you from having someone come in at the OS
> level and copying your data files and than moutning them on a differet
> server/database. A person could still come in to psql as a dba or anyone for
> that matter with the proper select grants and query off that data and see it
> in encrypted.

Yeah, the real question here is what threats are you trying to defend
against. "I need an encrypted database" is pretty nearly a meaningless
statement --- first tell us who the attacker is that you're worried about.

regards, tom lane

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Alvaro Herrera 2005-07-13 22:04:39 Re: index bloat
Previous Message snacktime 2005-07-13 21:42:25 Re: Transparent encryption in PostgreSQL?